added TODO comments to db.js